CLAIMS 

Having thus described our invention, what we claim as new and desire to secure 
by Letters Patent is as follows: 

1 . A method comprising accessing virtual iSCSI storage, including the steps of: 

defining at least one physical logical unit number (LUN) on a physical storage 
device having an device IP address; 

associating a unique TCP port number with each said at least one physical LUN; 

replacing a first LUN identifier specified in said iSCSI command with a second 
LUN identifier associated with said given TCP port number; 

establishing a unique IP address at which a virtual LUN is accessed from a host; 

identifying a block TCP port number with each block range of said virtual LUN; 

mapping a SCSI command to one or more iSCSI/TCP connections having said 
unique IP address and the block TCP port number identified with said each block 
range referenced by said SCSI command; and 

substituting said unique IP address and said block TCP port number with SEiid 
device IP address and said given TCP port number on packets between said host 
and said storage devices. 
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2. A method as recited in claim 1, further comprising forming a correspondence 
between an iSCSI command received on a given TCP port with a particular 
physical LUN associated with said given TCP port. 

3. A method as recited in claim 1, wherein said step of accessing results in 
forming TCP/iSCSI connections between the host and one or more physical LUNs 
without terminating said TCP/iSCSI connection at an intermediate gateway 
between said host and said device. 

4. A method as recited in claim 1, wherein the step of mapping includes 
converting a single SCSI command to one iSCSI connection per block range 
accessed. 

5. A method as recited in claim 1, wherein the step of substituting includes 
looking up a local substitution map at a gateway having a mapping between 
incoming destination IP address and port number and an outgoing device IP 
address and port number. 

6. A method as recited in claim 1, where a migration of a physical LUN from a 
source storage device to a target storage device requires only updating said 
substitution map to reflect new location of said physical LUN. 

7. A method as recited in claim 1 , further comprising: 
employing IPSec processing support at the host; 

employing IPSec processing support at a gateway between said host and said 
storage device; and 
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forming an IPSec tunnel between said host and said gateway; 

1^0. A method comprising providing support at a physical storage device for 
accessing virtual iSCSI storage, including the steps of: 

defining at least one physical logical unit (LUN) on the physical storage device 
having an device IP address; 

associating a unique TCP port number with each said at least one physical LUN; 
and 

replacing a first LUN identifier specified in said iSCSI command with a second 
LUN identifier associated with said given TCP port number. 

Kl^ A method comprising providing support at a host for accessing virtual iSCSI 
storage, including the steps of: 

establishing a unique IP address at which a virtual LUN is accessed fi-om the host; 

identifying a block TCP port number with each block range of said virtual LUN; 
and 

mapping a SCSI command to one or more iSCSI/TCP connections having said 
unique IP address and the block TCP port number identified with said each block 
range referenced by said SCSI conmiand; 
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O \^ A method comprising providing support at an intermediate gateway device 
between a host and a storage device for accessing virtual iSCSI storage, including 
the step of substituting a host-specified IP address and a host-specified TCP port 
number with a device IP address and a TCP port number within that device 
according to a substitution table describing the virtual to physical storage mapping 
for incoming packets before forwarding said packets. 



a conversion module at a physical storage device for accessing virtual iSCSI 
storage, coupled to means for defining at least one physical logical unit (LUN) on 
the physical storage device having an device IP address; and coupled to means for 
associating a unique TCP port number with each said at least one physical LUN; 
said conversion module to replace a first LUN identifier specified in said iSCSI 
command with a second LUN identifier associated with said given TCP port 
number. 



Z I)^ An apparatus at a physical storage device for accessing virtual iSCSI storage, 

comprising: 

means for replacing a first LUN identifier specified in an iSCSI command with a 
second LUN identifier associated with a given TCP port number included in said 
iSCSI command; 

means for defining at least one physical logical imit (LUN) on the physical 
storage device having an device IP address; and 




. An apparatus comprising: 
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1 means for associating a unique TCP port number with each said at least one 

2 physical LUN. 

3 . An apparatus comprising a virtualization module at a host for accessing 

4 virtual iSCSI storage, said virtualization module includes: 



5 means for establishing a unique IP address at which a virtual LUN is accessed 

6 from the host; 

7 means for identifying a block TCP port number with each block range of said 

8 virtual LUN; and 

C3 

C3 9 means for mapping a SCSI command to one or more iSCSI/TCP connections 

in 

10 having said unique IP address and the block TCP port number identified with said 

H 1 1 each block range referenced by said SCSI command. 

Q 

Q 12 jril An apparatus comprising a virtualization module at a host for accessing virtual 

f : 13 iSCSI storage, said virtualization module includes: 

CO 

fy 14 a control module establishing a unique IP address at which a virtual LUN is 

1 5 accessed from the host, and for identifying a block TCP port number with each 

1 6 block range of said virtual LUN; and 



1 7 a driver module for mapping a SCSI command to one or more iSCSI/TCP 

1 8 connections having said unique IP address and the block TCP port number 

19 identified with said each block range referenced by said SCSI command. 

20 K^. . An apparatus comprising: 



DOCKET NUMBER: YOR920020015US1 



-18- 



an address translation module at an intermediate gateway device between a host 
and a storage device for accessing virtual iSCSI storage, said address translation 
module having a substitution table describing a virtual to physical storage 
mapping, said address translation module to replace a host-specified IP address 
and a host-specified TCP port number with a device IP address and a TCP port 
number within said intermediate gateway device according to the substitution 
table for incoming packets before forwarding said incoming packets. 

An apparatus at an intermediate gateway device between a host and a storage 
device for accessing virtual iSCSI storage, 

said intermediate gateway device having a a substitution table, said substitution 
table describing a virtual to physical storage mapping of IP addresses and TCP 
port numbers; said apparatus comprising: 

means for replacing a host-specified IP address and a host-specified TCP port 
number, with an IP address and a TCP port number of the storage device, within 
said intermediate gateway device, according to the substitution table for incoming 
packets before forwarding said incoming packets. 

An article of manufacture comprising a computer usable medium having 
computer readable program code means embodied therein for causing accessing 
virtual iSCSI storage,, the computer readable program code means in said article 
of manufacture comprising computer readable program code means for causing a 
computer to effect the steps of claim 1. 

2Q/ A program storage device readable by machine, tangibly embodying a 
program of instructions executable by the machine to perform method steps for 
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1 accessing virtual iSCSI storage,, said method steps comprising the steps of claim 

2 1.. 

3 /f X A computer program product comprising a computer usable medium having 

4 computer readable program code means embodied therein for causing LUN 

5 identifier substitution, the computer readable program code means in said 

6 computer program product comprising computer readable program code means 

7 for causing a computer to effect the functions of claim 13. 



8 A computer program product comprising a computer usable medium having 

9 computer readable program code means embodied therein for causing LUN 
^ 10 identifier substitution, the computer readable program code means in said 

f 2 1 1 computer program product comprising computer readable program code means 

,'^1 12 for causing a computer to effect the functions of claim 14. 

P 

p 1 3 ^ A computer program product comprising a computer usable medium having 

14 computer readable program code means embodied therein for causing SCSI 

r"^ 1 5 command mapping, the computer readable program code means in said computer 

m 1 6 program product comprising computer readable program code means for causing 



1 7 a computer to effect the functions of claim 15. 

1 8 ^ A computer program product comprising a computer usable medium having 

19 computer readable program code means embodied therein for causing SCSI 

20 command mapping, the computer readable program code means in said computer 

2 1 program product comprising computer readable program code means for causing 

22 a computer to effect the functions of claim 16. 
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1 2^ ^ computer program product comprising a computer usable medium having 

2 computer readable program code means embodied therein for causing address 

3 substitution, the computer readable program code means in said computer 

4 program product comprising computer readable program code means for causing 

5 a computer to effect the functions of claim 17. 



C3 

m 
□ 

a 

P 



CO 

ru 



6 A computer program product comprising a computer usable medium having 

7 computer readable program code means embodied therein for causing address 

8 substitution, the computer readable program code means in said computer 

9 program product comprising computer readable program code means for causing 
1 0 a computer to effect the functions of claim 1 8. 



DOCKET NUMBER: YOR920020015US1 



-21- 



